
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json)
Hash identifier: s2m72jDr2Uhw0na8o8WsLyhcfv49fC6R5vk05uOqk0Y=
Subject key identifier: B2:A7:17:2D:7C:02:01:AA:E2:FB:78:46:A8:BF:95:DA:92:8A:1B:A9
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial: 06C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
Manifest number: 06BC
Signing time: Mon 22 Jun 2026 22:24:34 +0000
Manifest this update: Mon 22 Jun 2026 22:24:34 +0000
Manifest next update: Mon 29 Jun 2026 22:24:34 +0000
Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: Nke3Zh2GL8GSTOhCjLABOYLO96b1xUCAT0ffd1WcINc=)
2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Validity
Not Before: Jun 22 22:24:34 2026 GMT
Not After : Jun 29 22:24:34 2026 GMT
Subject: CN=6a39b622-38aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:83:d8:e5:66:f8:a3:7a:86:67:80:23:75:
ed:af:b6:3c:ab:85:90:50:ae:34:4f:a6:42:60:13:
0c:6d:05:fa:36:86:9d:e4:22:10:a4:29:87:b8:9b:
9a:40:0e:7e:ce:7e:7f:54:44:39:31:80:04:9b:dc:
69:de:0c:83:1a:2c:2c:2e:bb:b1:63:07:e3:93:66:
5e:82:85:c9:ea:22:9d:6b:35:f2:7c:8d:50:1a:f7:
93:61:f0:8d:bf:c2:a1:c6:a2:4f:24:bc:79:7d:e4:
6e:ff:29:a6:b2:04:a3:9d:35:7f:f3:9f:8b:5f:a2:
9e:7e:9d:29:f5:75:80:0c:15:40:2c:ef:12:e9:2c:
65:82:8b:f6:31:29:5d:1d:9b:c1:06:fc:7f:70:61:
cc:e2:83:ef:09:dc:ac:ce:ab:ad:54:e1:80:be:4a:
71:c8:17:05:3f:a5:65:a0:56:76:b7:cd:74:7e:02:
da:dd:dc:90:64:d5:0c:07:cd:ec:26:22:de:5b:3a:
ee:19:00:64:f3:76:a3:9e:99:d8:4f:b4:e5:35:03:
24:8d:b5:35:f8:aa:6d:c2:2d:bf:c2:79:fc:7b:e0:
1d:90:ea:2e:d1:44:b3:64:e6:1d:de:26:ae:f0:84:
8d:15:22:2a:24:f9:0a:b4:62:d8:2d:6d:bc:c6:18:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:17:2D:7C:02:01:AA:E2:FB:78:46:A8:BF:95:DA:92:8A:1B:A9
X509v3 Authority Key Identifier:
keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:64:06:98:18:c5:21:7d:74:0e:9e:57:01:87:1e:90:95:
1b:f5:bc:a9:41:14:1d:7a:a9:d1:8c:74:1e:e6:86:90:f2:60:
a3:08:01:6f:1e:67:95:de:b2:40:e3:95:b6:75:7e:35:3e:51:
fc:c8:13:58:0b:e2:a0:5b:a1:b0:c3:b0:dc:04:73:89:eb:b8:
16:59:41:63:90:9b:a8:3a:26:11:f9:77:97:46:2b:1d:98:91:
01:94:00:9b:cd:2e:f2:ec:5e:03:6f:28:30:9f:f6:36:a9:e9:
eb:d1:e3:d0:ef:68:97:80:4b:34:da:e2:27:81:3f:b5:3d:d9:
6d:e3:f0:25:d0:41:4f:c3:39:8b:be:3e:de:f9:9c:46:f3:25:
99:b2:76:56:cd:b0:31:b3:f2:92:7a:2d:76:00:0b:59:20:81:
2b:5f:55:87:4e:00:60:b9:68:7a:60:a4:65:d7:35:11:f2:40:
91:21:42:95:b6:c1:e0:da:01:96:95:42:86:68:59:ab:ee:c1:
dd:ff:7f:33:4b:41:7f:13:ad:bd:b7:00:7a:9f:b2:e7:dd:9e:
63:fc:c1:0f:37:88:53:57:86:74:c4:a2:d5:93:fa:0a:d3:00:
4f:a5:fd:c5:75:df:ba:d2:a8:83:e5:b3:85:73:1d:d2:12:cd:
71:9c:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:49:05 2026 by rpki-client